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PRELIMINARY AMENDMENT 

Dear Sir: 

Before examining the referenced application on the merits, please amend the 
application as outlined below: 



Art Unit: 
Examiner: 
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In the Specification: 

On Page 1, line 1, please insert the phrase -This is a continuation of International 
Application PCT/IB98/01613, with an international filing date of October 5, 1998.-- before the 
word "The". 

In the Claims: 

In claim 1, line 1, please delete "the steps, at the receiver/decoder, of. 

In claim 5, line 1, please delete "any preceding claim" and replace with -claim 

In claim 6, line 1, please delete "any preceding claim" and replace with —claim 

1-. 

In claim 9, line 1, please delete "in said downloading steps, of*. 



20-, 



20--. 



claim 52— 



claim 52- 



claim 52-. 



PATENT 
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In claim 9, line 1, please delete "8" and replace with -44-. 

In claim 13, line 1, please delete "12" and replace with —47—. 

In claim 17, line 1, please delete "any preceding claim" and replace with —claim 

In claim 19, line 1, please delete "18" and replace with -51-. 

In claim 24, line 1, please delete "Claims 20 to 23" and replace with -claim 20-. 

In claim 25, line 1, please delete "Claims 20 to 24" and replace with -claim 20-. 

In claim 26, line 1, please delete "Claims 20 to 25" and replace with -claim 20-. 

In claim 28, line 1, please delete "or 27". 

In claim 29, line 1, please delete "or 28". 

In claim 30, line 1, please delete "any of claims 20 to 29" and replace with —claim 

In claim 31, line 1, please delete "any of claims 20 to 30" and replace with -claim 

In claim 34, line 1, please delete "claim 33" and replace with —claim 53—. 
In claim 34, lines 3-4, please delete "or each". 

In claim 35, line 1, please delete "any of claims 32 to 34" and replace with - 
In claim 36, line 1, please delete "any of claims 32 to 35" and replace with - 
In claim 37, line 1, please delete "any of claims 32 to 36" and replace with — 
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Please cancel claims 7,8,10,11,12,14,15,16,18,32,33,38, 40-42 and add the 

following new clainns: 

"43. A method according to claim 1 , wherein the bitstream includes at least one 

data loader, said method further comprising: 

dividing the at least one data loader into a plurahty of modules; and 
dividing the data into a respective plurality of modules, each plurality of data 

modules being associated with a respective plurality of data loader modules. 
44. A method according to claim 43, further comprising: 
formatting the plurality of data loader modules as respective tables, the tables 

having the same respective table identification ("TID") and respective different table 

identification extensions ("TID-extensions"); and 

formatting the plurality of data modules as a respective table, the tables having the 

same respective TID as the tables of the data loader modules associated therewith and 

respective different TID-extensions. 

45. A method according to claim 9, wherein said tables have respective 
different TID-extensions other than a predetermined TID-extension, and further 
comprising: 

generating a respective directory table for the plurality of modules having the 
same TID, the directory table having said predetermined TID-extension and the same 
TID, the directory table containing for the plurality of modules a name of a module and a 
respective TID-extension. 

46. A method according to claim 45, further comprising: 
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downloading one of the tables having the predetermined TID-extension so as to 
download a directory table; 

determining from the content of the directory table the TID-extensions of the 
module tables having the same TID as the directory table; and 

downloading the module tables having the same TID as that of the downloaded 
directory table and TID-extensions determined from the downloaded directory table. 

47. A method according to claim 1 , fiirther comprising: 

generating a directory table having a predetermined table identification ("TED") 
and containing, for a plurality of version identifications of a receiver/decoder, a 
respective TID associated with that version identification. 

48. A method according to claim 13, further comprising: 

downloading said directory table having the predetermined TID; and determining 
the version identification of the receiver decoder, wherein downloading a directory table 
comprises downloading that one of the tables having a TID associated with the version 
number of the receiver/decoder and the predetermined TID-extension. 

49. A method according to claim 45, further comprising: 

including in a transmitted directory table a directory version identification 
therefor; 

determining at the receiver/decoder whether the directory version identification 
of a currently transmitted directory table is more recent that the directory version 
identification of a previously downloaded directory table having the same TID as said 
currently fransmitted table; and 
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aborting downloading the data if the currently transmitted directory table is not 
more recent. 

50. A method according to claim 1 , ftirther comprising: 
including in the bitstream a data version identification of the data; 
determining, at the receiver/decoder, whether the data version identification of 

received data is more recent than the data version identification of currently stored data; 
and 

downloading the received data from the bitstream if the received data is more 

recent. 

51. A method according to claim 1 , fixrther comprising: 
transmitting a second data loader included in said bitstream; 
downloading the second data loader, at the receiver decoder; and 
downloading the data loader and the data using the second data loader. 

52. A transmission system comprising: 

means for transmitting a bitstream including at least one loader for loading data 
into a receiver/decoder, and data associated with the at least one loader; and 

means for dividing the at least one loader into a plurality of modules and dividing 
the data associated with the at least one loader into a respective plurality of modules for 
transmittal by said transmitting means. 

53 . A transmission system according to claim 52, further comprising: 
means for formatting each of the modules of the at least one loader as a 

respective table, the table of the at least one loader having the same respective table 
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identification ("TID") and respective different table identification extensions ("TID- 
extensions"); and 

means for formatting each of the modules of the data associated with the at least 
one loader as a respective table, the table of the modules of data having the same 
respective TID as the tables of the loader modules associated therewith and respective 
different TID-extensions. 

REMARKS 

The claims have been amended to remove multiple dependencies and to correct 
antecedent basis errors. Full examination and favorable action are requested. 

Please charge any fees, or make any credits, to Deposit Account No. 500-591, 
Reference No. 11345/011001 



Rosenthal & Osha L.L.P. 

700 Louisiana Street, Suite 4550 

Houston, TX 77002 

Telephone: 713/228-8600 
Facsimile: 713/6228-8778 

1 1 345 01 1 00 1 .2000030 17 .01 .doc 





Jonathan?. Osha 
Reg. No. 33,986 



6 



APPLICATION 
FOR 

UNITED STATES LETTERS PATENT 



TITLE: INSTREAM LOADER 

APPLICANT: Jean-Claude SARFATI 



"EXPRESS MAIL" Label No.: F.T ,S21 605845US 
Date of Deposit: March 31. 2000 




022511 

mm TRflDEMflRK OFFICE 



wo 99/18724 



PCT/IB98/01613 



- 1 - 

DOWNLOADING DATA 



This invention relates to> 

a method of downloading data to a receiver/decoder; 
5 • such a receiver/decoder per se; and 
a transmission system. 



The term "receiver/decoder" used herein may connote a receiver for receiving either 
encoded or non-encoded signals, for example, television and/or radio signals, which may 

10 be broadcast or transmitted by some other means. The term may also connote a decoder 
for decoding received signals. Embodiments of such receiver/decoders may include a 
decoder integral with the receiver for decoding the received signals, for example, in a 
"set-top box", such a decoder functioning in combination with a physically separate 
receiver, or such a decoder including additional functions, such as a web browser, a 

15 video recorder, or a television. 



The advent of digital transmission systems intended primarily for broadcasting television 
signals, in particular but not exclusively satellite television systems, has opened up the 
possibility of using such systems for other purposes. One of these is to provide 

20 interactivity with the end user. As used herein, the term "digital transmission system" 
includes any transmission system for transmitting or broadcasting for example primarily 
audiovisual or multimedia digital data. Whilst the present invention is particularly 
applicable to a broadcast digital television system, the invention may also be applicable 
to a fixed telecommunications network for multimedia intemet applications, to a closed 

25 circuit television, and so on. 



One way of doing this is to nm an application on the receiver/decoder through which 
the television signal is received. The code for the application could be permanently 
stored in the receiver/decoder. However, this would be rather limiting. Preferably, the 
30 receiver/decoder should be able to download the code for a required application. In this 
way, more variety may be provided, and applications can be updated as required without 
any action on the part of the user. 
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In an MPEG system, application code may be downloaded in MPEG tables transmitted 
in an MPEG bitstream. The temi MPEG refers to the data transmission standards 
developed by the International Standards Organisation working group "Motion Pictures 
Expert Group" and in particular but not exclusively the MPEG-2 standard developed for 
5 digital television apphcations and set out in the documents ISO 13818-1, ISO 13818-2, 
ISO 13818-3 and ISO 13818-4, In the context of the present patent application, the 
term includes all variants, modifications or developments of MPEG formats applicable 
to the field of digital data transmission. 

10 Software for downloading the MPEG tables must be stored permanently in the 
receiver/decoder. In order to download data such as application code or an updated 
version of a run time engine, complex software is required, this software typically 
taking up a large amount of memory. However, such software may only be used 
sporadically, if at all, and so a large amount of memory may be taken up by software 

15 which is redundant for a long period of time. 

Software stored in the receiver/decoder for downloading data from the bitstream is 
commonly referred to as a "Bootstrap" loader. The Bootstrap loader is preferably 
adapted to download most forms of data, including software from the bitstream for 
20 storage, for example, in the Flash memory volume of the receiver/decoder. Thus, the 
Bootstrap loader tends to have a somewhat "basic" structure, having minimal 
functionality, so that all forms of software can be downloaded. 

The Bootstrap loader is typically stored in a ROM memory volxime of the 
25 receiver/decoder, and is not erasable therefrom. As the Bootstrap loader cannot be 
modified once it has been written in the ROM memory volume, processing errors which 
may occur should the Bootstrap loader become corrupted cannot be corrected. In 
addition, the functionality of the Bootstrap loader is "fixed" once it has been written in 
ROM; it caimot be updated, for example, in such a manner as to improve the time taken 
30 to download data from the bitstream. Thus, software having an improved, or new, 
structure which is unrecognisable to the Bootstrap loader cannot be downloaded from 
the bitstream. 
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If a portion of data stored in the receiver/decoder becomes corrupted, the Bootstrap 
loader can be used to download a complete uncorrupted version of this data. If only 
a very small portion of the data has become corrupted, this can result in a significant 
amoimt of time being spent downloading the portions of the data which have not 
5 become corrupted. 

The present invention seeks to solve these and other problems. 

In a first aspect, the present invention provides a method of downloading data to a 
10 receiver/decoder, comprising the steps, at the receiver/decoder, of: 
receiving a bitstream including the data; 

downloading a loader for loading the data fi-om the bitstream into the 
receiver/decoder; and 

downloading said data from the bitstream using said downloaded data loader. 

15 

In one embodiment, the downloaded data loader comprises a data loading program. At 
least part of the data loader, preferably most of, or even all of the data loader, may be 
in the form of native code. As used herein, the temi "native code" includes hardware 
specific code, code which is specific to a particular hardware platform of the 

20 receiver/decoder, code which is non-interpretive, and/or code which is directly 
executable by a microprocessor of the receiver/decoder. Thus, the structure taken by 
a piece of native code to be downloaded by a receiver/decoder will depend on the 
particular apparatus used in the hardware platform of that receiver/decoder. This is in 
contrast to "interpretive code", such as that known as "p-code" to the applicants, which 

25 requires interpretation by software stored in the receiver/decoder so that it may be 
executed by the microprocessor, and which therefore is functional over a wide range of 
hardware platforms. The data downloaded by the data loader may be in the form of 
native code, p-code, or any other suitable form, such as data tables. 

30 By means of the above, a loader for loading the data from the bitstream is downloaded 
from the bitstream and stored in, preferably temporarily in RAM of, the 
receiver/decoder. Following downloading using the data loader of the required data 
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from the bitstream, the downloaded data loader is preferably deleted from the 
receiver/decoder. Thus, once the downloaded data loader has served its purpose, the 
storage capacity of the RAM is effectively increased for the time when the downloading 
of data is not required. 

5 

It is of course not essential to delete the downloaded data loader once it has downloaded 
all of the required data from the bitstream. On the contrary, the data loader may 
subsequently be stored in non- volatile memory of the receiver/decoder, such as a Flash 
memory volume. This can enable the receiver/decoder to download further data using 
10 the stored data loader without having to reload the data loader from the bitstream, 
thereby decreasing the time taken to download that data. Thus, a plurality of different 
data loaders may be stored at any one time in the receiver/decoder. 

As a data loader written specifically for the downloading of one particular data item can 
15 be downloaded from the bitstream as required by the receiver/decoder, improved 
frmctionality of the receiver/decoder may be provided, as data with an updated or 
revised structure, which is different to the structure of data which can be downloaded 
by the Bootstrap loader, can be downloaded and stored in the receiver/decoder. 

20 In one preferred embodiment, the downloading of the data is performed by the 
downloaded data loader. Thus, for the downloading of data, the Bootstrap loader is 
effectively temporarily replaced by the downloaded data loader, thus enabling an 
updated or otherwise improved data loader to be used by the receiver/decoder. 

25 Preferably, a portion only of data stored in the receiver/decoder is replaced by a 
corresponding portion of data downloaded by the downloaded data loader. For example, 
if a portion of the stored data becomes corrupted or out of date, an uncomipted or 
updated version of that portion of the data only can be downloaded by the 
receiver/decoder, the downloaded data loader "patching" the downloaded portion of 

30 data into the stored data where appropriate. Thus the downloaded data loader does not 
download an entire version of the data stored in the receiver/decoder. This can provide 
for a significant improvement in the time taken to repair or update stored data, as the 
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downloading of uncorrapted portions of data is not required. In an alternative 
embodiment, a portion of data stored in the receiver/decoder is replaced by a 
corresponding portion of, for example, a section of data transmitted with the 
downloaded data loader. 

5 

The bitstream may comprise at least one data loader, and, accordingly, the method may 
further comprise the steps, at a transmitting system, of: 

for the or each data loader, dividing the data loader into a plin*ality of modules; 

and 

10 for the or each data loader, dividing the data into a respective plurality of 

modules, each plurality of data modules being associated with a respective plurality of 
data loader modules. 

Thus, the bitstream may include a plurality of data loaders and associated data. This 
15 can enable receiver/decoders having different hardware platforms to download the 
appropriate versions of the data loader and associated data. Data, such as an 
appHcation, may conveniently be made up of a number of modules, which can be 
downloaded, and if appropriate run, as required. 

20 The method may further comprise the steps, at the transmitting system, of: 

*^ for the or each data loader, formatting each of the modules as a respective table, 
the tables having the same respective table identification ("TDD") and respective 
different table identification extensions ("TID-extensions"); a^d 

for the or each plurality of modules of data, formatting each of the modules of 
25 data as a respective table, the tables having the same respective TID as the tables of the 
data loader modules associated therewith and respective different TID-extensions. 

It is preferred that an MPEG protocol is used and, if so, the downloading steps may 
comprise downloading module MPEG tables, 

30 

The tables may have respective different TED-extensions other than a predetermined 
TID-extension; and the method may further comprise the step, at the transmitting 
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system, of generating a respective directory table for the or each pluraUty of modules 
having the same TID, the or each directory table having said predetermined TID- 
extension and that TID, the directory table containing for each of the modules a name 
of that module and the respective TID-extension, 

5 

The method may further comprise the steps, at the receiver/decoder, of: 

downloading one of the tables having the predetermined TID-extension so as to 

download a directory table; 

determining jfrom the content of the directory table the TID-extensions of the 
10 module tables having the same TID as the directory table; and 

in said downloading steps, downloading the module tables having the same TID 

as that of the downloaded directory table and TID-extensions determined from the 

downloaded directory table. 



15 By these features, the- directory table can be readily identified because it has a particular 
TID-extension, and once it has been downloaded it can enable the receiver/decoder to 
identify the module tables of the data loader from their respective TID-extensions, 

The method may further comprise the step, at a transmitting system, of generatmg a 
20 directory table having a predetermined table identification CTID") and containing, for 
each of a plurality of version identifications of a receiver/decoder, a respective TID 
associated with that version identification. 

If so, the method may further comprise the steps, at the receiver/decoder, of: 
25 downloading said directory table having the predetermined TID; and 

determining the version identification of the receiver/decoder, 
wherein the step of downloading a directory table comprises downloading that 

one of the tables having a TID associated with the version number of the 

receiver/decoder and the predetermined TID-extension. 

30 

Preferably, the version identification includes a code assigned to the manufacturer of the 
receiver/decoder and a code assigned to the version of the receiver/decoder. 
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It is expected that receiver/decoders may be designed and manufactured by various 
different manufacturers. Each manufacturer may produce a number of different versions 
of the receiver/decoder. Receiver/decoders may therefore have various different 
hardware designs, though they will of course all conform to the same functional 
5 specification. It is therefore important that data, such as an application, behaves in the 
same way on every receiver/decoder, and that a receiver/decoder should execute all 
applications in the same, correct manner. 

In order to ensure that the data is compatible with a particular version of a receiver/ 
10 decoder, the bitstream may include a data loader and data for each version identification 
of the receiver/decoder, and the directory table having the predetermined TED can 
enable the TID of the modules of the data loader and data for each version identification 
of the receiver/decoder to be easily identified. 

15 Preferably, the method further comprises the steps, at the transmitting system, of: 

including in each transmitted directory table a directory version identification 
therefor; and 
at the receiver/decoder:- 

determining whether the directory version identification of a currently 
20 transmitted directory table is more recent than the directory version identification of a 
previously downloaded directory table having the same TID as the currently transmitted 
directory table, and if not, aborting the downloading of data. 

The Bootstrap loader may be instructed, for example, by an application, periodically to 
25 download the directory table to determine whether the durectory version identification 
of the previously downloaded directory table has changed. This can ensure that the 
receiver/decoder downloads promptly any updated data firom the bitstream. 

In order to avoid overwriting resident data stored in the receiver/decoder with identical 
30 received data, an application requesting updating of the resident data can choose to abort 
the downloading of data if a table directory is the same as that used in a previous 
updating of resident data. 
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Preferably, at least one of the module tables is formatted as a plurality of sections which 
are transmitted separately in the bitstream, each of the sections containing in a 
predetermined portion thereof an identification of that section in the table and an 
indication of the number of the sections in a table. 

The method may further comprise the step, at the transmitting system, of cyclically 
transmitting the tables in a bitstream. 



The method may further comprise the step, in a transmitting system, of: 
10 including in the bitstream a data version identification of the data; and, 

at the receiver/decoder, the step of: 

determining whether the data version identification of the received data is more 
recent than the data version identification of currently stored data, and if so, performing 
said step of downloading said data firom the bitstream. 

15 

By this feature, the downloading can be aborted prior to erasing the resident software 
and/or commencing the downloading of the received data if the data version 
identification of the received data is the same as that of resident data stored in the 
receiver/decoder. 

20 

Preferably, the step of determining whether the data version identification of the 
received data is more recent than the data version identification of cxirrently stored data 
is conducted after determining that the data version identification of a currently 
transmitted directory table is more recent than the data version identification of a 
25 previously downloaded directory table having the same TED as the currently transmitted 
directory table. 

In another preferred embodiment, the downloaded data loader modifies means stored in 
the receiver/decoder for downloading the data loader, so that the data can be 
30 downloaded by the modified downloading means. Thus, the downloading means can 
be modified conveniently by a data loader downloaded fi-om the bitstream so that, for 
example, data with a different structure may be downloaded by the downloading means. 
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Preferably, the method comprises the steps, at a transmitting system, of; 

transmitting a second data loader included in said bitstream; and 
at the receiver/decoder, of: 

downloading the second data loader; and 
5 downloading one of the first-mentioned data loader and the data; said transmitted 

downloading means performing the downloading of one of the first-mentioned data 
loader and the data. 

In one embodiment, the second data loader is provided by another data loading program, 
10 at least part of the second loader preferably being in the form of native code. 

This can enable downloading of a data loader to be avoided by using a different data 
loader previously downloaded from the bitstream. Thus, it is not necessary to download 
a data loader fi-om the bitstream every time fresh or revised data is to be dovraloaded 
15 if a previously downloaded data loader is able to download the data as efficiently as the 
data loader. This can reduce significantly the time taken to download firesh or revised 
data fi-om the bitstream. The second data loader may provide improved functionality 
over the first-mentioned data loader, for example, the second data loader may be able 
to download computer programs. 

20 

In a second aspect, the present invention provides a receiver/decoder comprising: 
a receiver for receiving a bitstream including data; 
storage means, such as a memory; and 

downloading means for downloading from the bitstream into the storage means 
25 a loader for loading the data from the bitstream into the receiver/decoder. 

In one preferred embodiment, the downloading means is provided by a boot program 
stored in the receiver/decoder. 

30 The receiver/decoder may further comprise means for deleting the downloaded data 
loader from the storage means afier the data has been downloaded firom the bitstream. 
The deleting means may be provided by a central processor and associated software 
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The receiver/decoder may be arranged to download tables. If so, the downloading 
means may be arranged to download a table having a table identification ("TID") and 
5 a predetermined table identification extension ("TID- extension") so as to download a 
directory table, to determine from the content of the directory table the TID-extensions 
of module tables having the same TID as the directory table, and to download the 
module tables having the same TID as that of the downloaded directory table and TID- 
extensions determined from the downloaded directory table so as to download said 
10 loader. 

The downloading means may be arranged to download a directory table having a 
predetermined TID and containing, for each of a plurality of version identifications of 
a receiver/decoder, a respective TID associated with that version identification, to 
1 5 determine the version identification of the receiver/decoder, and to download a directory 
table having a TID associated with the version number of the receiver/decoder and the 
predetermined TID-extension. 

In a prefeixed embodiment, the downloading means is arranged to determine whether 
20 a version identification of a currently transmitted directory table is more recent than the 
version identification of a previously downloaded directory table having the same TID 
as the currently transmitted directory table, and if not, to abort the downloading of said 
loader. 

25 The receiver/decoder may further comprise a parallel port and/or a serial port arranged 
to receive data formatted as at least one table. 

Preferably, said downloading means is arranged to dovraload a second data loader 
included in said bitstream for downloading one of the first-mentioned data loader and 
30 the data. 



In a third aspect, the present invention provides a transmission system comprising: 
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means, such as a transmitter, for transmitting a bitstream including native code 
comprising at least one data loader for loading data into a receiver/decoder and data 
associated with the or each data loader; and 

means, such as a data server, for dividing the or each data loader into a plurality 
5 of modules and dividing the data associated with the or each data loader into a 
respective plurality of modules for transmittal by said transmitting means. 

Preferably, the transmission system further comprises: 

means for formatting each of the modules of the or each data loader as a 
10 respective table, the tables of the or each data loader having the same respective table 
identification ("TID") and respective different table identification extensions ('TID- 
extensions"); and 

means for formatting each of the modules of the data associated with the or each 
data loader as a respective table, the tables of the modules of data having the same 
15 respective TDD as the tables of the data loader modules associated therewith and 
respective different TID- extensions. 

The formatting means may be conveniently provided by the data server. 

20 The tables may have respective different TID-extensions other than a predetermined 
TID-extension, and the system may fiirther comprise means for generating a respective 
directory tables for the or each plurality of modules having the same TTD, each 
directory table having that TED and said predetermined TID-extension, the directory 
containing for each of the modules a name of that module and the respective TID- 

25 extension. 

The transmission system may further comprise: 

means for generating a directory table having a predetermined table identification 
CTID'O and containing, for each of a plurality of version identifications of a 
30 receiver/decoder, a respective TDD associated with that version identification. 

The transmission system may further comprise means for including in each transmitted 
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Each of the aforementioned means may conveniently be provided by the data server. 

5 A fourth aspect of the present invention provides a combination of a receiver/decoder 
as described above and a transmission system as described above. 

A fifth aspect of the present invention provides a signal comprising at least one loader 
for loading data into a receiver/decoder, and data associated with the or each data 
10 loader, the or each data loader being divided into a plurality of modules and the data 
associated with the or each data loader being divided into a respective plurality of 
modules. 

All the features of the method aspect of the invention can be applied to the apparatus 
15 and signal aspects as appropriate, and vice versa. 

Preferred features of the present invention will now be described, purely by way of 
example, with reference to the accompanying drawings, in which:- 

20 Figure 1 shows the overall architecture of a digital television system; 

Figure 2 shows the architecture of an interactive system of the digital television 



25 Figure 



30 



Figure 



Figure 



Figure 



Figure 



4 



3 



5 



6 



7 



system of figure 1; 

is a schematic diagram of interfaces of a receiver/decoder forming part 
of the system of figures 1 and 2; 

is a schematic diagram of a remote controller used in the digital 
television system; 

shows the arrangement of files within a module downloaded into the 
memory of an interactive receiver/decoder; 

illustrates an interrelationship between a nimiber of components of an 
MPEG stream; 

illustrates how an application may be made up of modules/tables, which 
in turn may be made up of sections; 
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Figure 10 
5 Figure 11 
Figure 12 



Figure 8 
Figure 9 



illustrates the authentication of an MPEG table; 

illustrates various areas of memory in a receiver/decoder of the television 
system; 

illustrates a parameters field; 
illustrates a hardware directory table; 
illustrates a loader directory table; and 



Figure 13 illustrates the procedure for downloading data. 

An overview of a digital television system 1000 is shown in figure 1. The digital 

10 television system 1000 includes a mostly conventional digital television system 2000 
which uses the known MPEG-2 compression system to transmit compressed digital 
signals. In more detail, MPEG-2 compressor 2002 in a broadcast centre receives a 
digital signal stream (typically a stream of video signals). The compressor 2002 is 
connected to a multiplexer and scrambler 2004 by linkage 2006, The multiplexer 2004 

1 5 receives a plurality of fiirther input signals, assembles one or more transport streams and 
transmits compressed digital signals to a transmitter 2008 of the broadcast centre via 
linkage 2010, which can of course take a wide variety of forms including 
telecommunications links. The transmitter 2008 transmits electromagnetic signals via 
uplink 2012 towards a satellite transponder 2014, where they are electronically 

20 processed and broadcast via notional downlink 2016 to earth receiver 2018, 
conventionally in the form of a dish owned or rented by the end user. The signals 
received by receiver 2018 are transmitted to an integrated receiver/decoder 2020 owned 
or rented by the end user and connected to the end user's television set 2022. The 
receiver/decoder 2020 decodes the compressed MPEG-2 signal into a television signal 

25 for the television set 2022. 

A conditional access system 3000 is connected to the multiplexer 2004 and the 
receiver/decoder 2020, and is located partly in the broadcast centre and partly in the 
decoder. It enables the end user to access digital television broadcasts from one or more 
30 broadcast suppliers. A smartcard, capable of deciphering messages relating to 
commercial offers (that is, one or several television programmes sold by the broadcast 
suppUer), can be inserted into the receiver/decoder 2020, Using the decoder 2020 and 
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smartcard, the end user may purchase commercial offers in either a subscription mode 
or a pay-per-view mode. 

An interactive system 4000, also connected to the multiplexer 2004 and the 
5 receiver/decoder 2020 and again located partly in the broadcast centre and partly in the 
decoder, enables the end user to interact with various appHcations via a modemmed 
back channel 4002. 

Figure 2 shows the general architecture of the interactive television system 4000 of the 
10 digital television system 1000. 

For example, the interacting system 4000 allows an end user to buy items from 
on-screen catalogues, consult local news and weather maps on demand and play games 
through their television set. 

15 

The interactive system 4000 comprises in overview four main elements:- 

an authoring tool 4004 at the broadcast centre or elsewhere for enabling a 

broadcast supplier to create, develop, debug and test applications; 

an application and data server 4006, at the broadcast centre, connected to the 

20 authoring tool 4004 for enabling a broadcast supplier to prepare, authenticate 

and format applications and data for delivery to the multiplexer and scrambler 
2004 for insertion into the MPEG-2 transport stream (typically the private 
section thereof) to be broadcast to the end user; 
• a virtual machine intending a run time engine (RTE) 4008, which is an 

25 executable code installed in the receiver/decoder 2020 owned or rented by the 

end user for enabling an end user to receive, authenticate, decompress, and load 
applications into the working memory of the decoder 2020 for execution. The 
engine 4008 also runs resident, general-purpose applications. The engine 4008 
is independent of the hardware and operating system; and 

30 • a modemmed back channel 4002 between the receiver/decoder 2020 and the 
application and data server 4006 to enable signals instructing the server 4006 to 
insert data and applications into the MPEG-2 transport stream at the request of 
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the end user. 



The interactive television system operates using "applications" which control the 
fiinctions of the receiver/decoder and various devices contained therein. AppUcations are 
5 represented in the engine 4008 as "resource files". A "module" is a set of resource files 
and data. A "memory volimie" of the receiver/decoder is a storage space for modules. 
Modules may be dovraloaded into the receiver/decoder 2020 firom the MPEG-2 transport 
stream. 



10 Physical interfaces of the receiver/decoder 2020 are used for downloading data. With 
reference to Figure 3, the decoder 2020 contains, for example, six downloading devices; 
MPEG flow timer 4028, serial interface 4030, parallel interface 4032, modem 4034 and 
two card readers 4036. The receiver/decoder 2020 may also include a display 4038, 



15 For the purposes of this specification, an application is a piece of computer code for 
controlling high level fimctions of preferably the receiver/decoder 2020, For example, 
when the end user positions the focus of a remote controller 2026 (as shown in more 
detail in figure 4) on a button object seen on the screen of the television set 2022 and 
presses the validation key, the instruction sequence associated with the button is run. 

20 

An interactive application proposes menus and executes commands at the request of the 
end user and provides data related to the purpose of the apphcation. Applications may 
be either resident applications, that is, stored in the ROM (or FLASH or other non- 
volatile memory) of the receiver/decoder 2020, or broadcast and downloaded into the 
25 RAM (or FLASH) of the decoder 2020. 



Examples of applications are:- 

An Initiating Application. The receiver/decoder 2020 is equipped with a resident 
initiating application which is an adaptable collection of modules (this term 
30 being defined in more detail herevmder) enabling the receiver/decoder 2020 to 

be immediately operative in the MPEG-2 environment. The apphcation provides 
core features which can be modified by the broadcast supplier if required. It also 
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provides an interface between resident applications and downloaded applications. 
A Startup Application. The startup application allows any application, either 
downloaded or resident, to run on the receiver/decoder 2020. This application 
acts as a bootstrap executed on arrival of a service in order to start the 
5 application. Startup is downloaded into RAM and therefore can be updated 

easily. It can be configured so that the interactive applications available on each 
channel can be selected and run, either immediately after downloading or after 
preloading. In the case of preloading, the application is loaded into the memory 
2024 and is activated by the startup when required, 
10 • A Program Guide. The Program Guide is an interactive application which gives 
full information about programming. For example, it may give information 
about, say, one week's television programmes provided on each channel of a 
digital television bouquet. By depressing a key on the remote controller 2026, 
the end user accesses an add-on screen, overlaid on the event shown on the 
15 screen of the television set 2022. This add-on screen is a browser giving 

information on the current and next events of each channel of the digital 
television bouquet. By depressing another key on the remote controller 2026, the 
end user accesses an application which displays a list of information on events 
over one week. The end user can also search and sort events with simple and 
20 customised criteria. The end user can also access directly a selected channel. 

A Pay Per View appHcation. The Pay Per View Application is an interactive 
service available on each PPV channel of the digital television bouquet in 
conjunction with the conditional access system 3000. The end user can access 
the application usmg a television guide or channel browser. Additionally, the 
25 application starts automatically as soon as a PPV event is detected on the PPV 

channel. The end user is then able to buy the current event either through his 
daughter smartcard 3020 or via the commimication server 3022 (using a modem, 
a telephone and DTMF codes, MINITEL or the hke). The application may be 
either resident in the ROM of the receiver/decoder 2020 or downloadable into 
30 the RAM of the receiver/decoder 2020. 

An Internet Browser application. In one example of the Intemet browser 
application, instructions from the user, such as a request to view a web page 
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having a particular URL, are entered using the remote controller 2026, and these 
are sent by the modemmed back channel 4002 to the application and data server 
4006, The appropriate web page is then included in the transmissions from the 
broadcast centre, received by the receiver/decoder 2020 via the uplink 2012, 
5 transponder 2014 and downlink 2016, and displayed on the television 2022. 

Applications are stored in memory locations in the receiver/decoder 2020 and 
represented as resource files. The resource files comprise graphic object description unit 
files, variables block unit files, instruction sequence files, application files and data files. 

10 

The graphic object description unit files describe the screens, the man-machine interface 
of the application. The variables block imit files describe the data structures handled by 
the application. The instruction sequence files describe the processing operations of the 
applications. The application files provide the entry points for the applications. 

15 

The applications constituted in this way can use data files, such as icon library files, 
image files, character font files, colour table files and ASCII text files. An interactive 
application can also obtain on-line data by effecting inputs and/or outputs. 

The engine 4008 only loads into its memory those resource files it needs at a given 
time. These resource files are read firom the graphic object description unit files, 
instruction sequence files and application files; variables block unit files are stored in 
memory following a call to a procedure for loading modules and remain locked there 
until a specific call to a procedure for unloading modules is made. 

With reference to Figure 5, a module 4010, such as a tele-shopping module, is a set of 
resource files and data comprising the following: 
a single application file 4012; 

an undetermined number of graphic object description mat files 4014; 
an imdetermined number of variables block unit files 4016; 
an undetermined number of instruction sequence files 4018; and 
where appropriate, data files 4020 such as icon library files, image files, 
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character font files, colour table files and ASCII text files. 
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The concept of modules 4010 together with the concept of downloading small pieces 
of code allows the easy evolution of applications. They can be downloaded into 
5 permanent FLASH memory of the decoder 2020 as resident software or broadcast in 
order to be downloaded into the RAM of the decoder 2020 only when needed by the 
end user. 

In the case of MPEG flow, one module 4010 is transported in one single MPEG table. 
10 In the case of modules transmitted to the MPEG tuner 4028, the long MPEG-2 format 
is used, with a long header and a CRC code. This is also the case with the five other 
interfaces (serial interface 4030, parallel interface 4032, modem 4034 and two card 
readers 4036), except that the "short" MPEG-2 format with a shorter header and no 
CRC is used, 

15 

Referring in particular to figure 6, as is known, the MPEG-2 bitstream includes a 
programme access table ("PAT") 10 having a packet identification ("PDD") of 0. The 
PAT contains references to the PIDs of the programme map tables ("PMTs") 12 of a 
number of programmes. Each PMT contains a reference to the PIDs of the streams of 
20 the audio MPEG tables 14 and video MPEG tables 16 for that programme. A packet 
having a PID of zero, that is the programme access table 10, provides the entry point 
for all MPEG access. 

In order to download applications and data for them, two new stream types are defined, 
25 and the relevant PMT also contains references to the PIDs of the streams of application 
MPEG tables 18 (or sections of them) and data MPEG tables 20 (or sections of them). 

Referring to figure 7, in order to download an application 22, the application is divided 
into modules 24 each formed by an MPEG table, some of which are made up by a 
30 single section 18, and others of which may be made up by a plurality of sections 18. 
A typical section 18 has a header 26, which includes a one-byte table identification 
("TID") 28, the section number 30 of that section in the table, the total number 32 of 



wo 99/18724 PCT/IB98/01613 

- 19 - 

sections in that table and a two-byte TID extension 34. Each section also includes a data 
part 36 and a CRC 38. For a particular module/table 24, all of the sections 18 making 
up that table 24 have the same TID 28 and the same TID extension 34. For a particular 
application 22, all of the tables 24 making up that application 22 have the same TID 28, 
5 but different respective TID extensions. 



The authentication of an MPEG table will now be described with reference to Figure 
8. The table 40 includes data 42 (typically comprising header 26, TID 28, TID 
extension 34 and data part 36), a key identification 44 and a cipher area 46. The key 

10 identification 44 comprises a 1-byte identification of a particular private key to be used 
to encrypt the block. The cipher area 46 comprises a block of 96 bytes of data. The 
first byte 48 is zero. A 16 byte signature 50 begins at an offset of typically between 
0 and 31 bytes after the first byte. The signature 50 is produced using the known MD5 
signature generating process on the data 42. Dummy data 52 is inserted between the 

15 first byte and the sigrlature 50 and the block is encrypted using a known encryption 
process and the private key to which the key identification 44 corresponds. 

If a plurality of MPEG tables are to be authenticated, then a directory hsting the names 
of the tables and the signatures of those tables is included in the carrier signal. In the 
20 case of MPEG flow, this directory is transported in one single MPEG table, typically 
having a TED extension 34 of zero. The directory table is authenticated with the 
mechanism described above. Once the directory has been downloaded firom the carrier 
signal it is possible for the appHcation to download one or more of the MPEG tables 
listed in the directory, 

25 

The operation of the receiver/decoder 2020 in dealing with signatures and decryption 
during downloading of an application will now be described. Referring to figure 9, the 
receiver/decoder 2020 includes EEPROM 68, FLASH 69, ROM 70 and RAM 72. The 
EEPROM 68 includes a protected region 74 which is used by the virtual machine, and 
30 where only the virtual machine (and not a normal application) can write. The protected 
region 74 includes a key validation bitmap 76 of 16 or 256 bits, and an offset bitmap 
80 of 32 bits. The ROM 70 includes, in one embodiment, sixteen public keys 82, m 
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which case a 16-bit key validation bitmap is employed, and in another embodiment 256 
public keys, in which case a 256-bit key validation bitmap is employed. The public keys 
are identified by their physical locations in the ROM 70, or they may alternatively be 
included in a lookup table, whereby a particular key identification will yield the 
5 corresponding public key. The RAM 72 may be used to store a temporary key 84. 

When an appHcation is to be downloaded, firstly the directory table having the 
predetermined TID for that application and a TID extension of zero is downloaded. The 
key identification 44 is then extracted from the directory table and a check is made of 

10 the key validation bitmap 76 in the protected memory 74 that the bit corresponding to 
the extracted key identification 44 is set. If it is not, then further downloading of the 
application is aborted. However, if the appropriate key is set, then a public key 82 is 
selected fi-om the ROM 70 corresponding to the extracted key identification 44. The 
selected public key and a known decryption process are then used to decrypt the 

15 encrypted block 46 in the directory table 40 to produce a decrypted block. The offset 
contained in the offset bitmap 80 in the protected memory 74 is looked up, or, if more 
than one offset bit is set, each offset bit is looked up in turn, and sixteen bytes of data 
are extracted fi-om the decrypted block starting with the looked-up offset. For the or 
each looked-up offset, the 16 bytes are treated as the signature transmitted with the 

20 directory table 40. The signature of the entries in the directory 42 of the directory table 
40 is calculated using the known MD5 process, and this calculated signature is 
compared with the signature extracted firom the decrypted block. If the two signatures 
for the or each looked-up offset do not match, then fiirther downloading of the 
application is aborted. However, if one of the signatures matches, then downloading of 

25 the modules specified in the directory 42 can proceed. As mentioned above, in order to 
download a particular module, the TID extension for that module is obtained firom the 
directory 42, and the MPEG table 24 or sections 18 with the same TID as the directory 
table and with the obtained TID extension is downloaded. Once the module MPEG table 
has been downloaded, the receiver/decoder 2020 calculates the signature of the 

30 downloaded table using the known MD5 process and then compares that calculated 
signature with the signature contained in the directory entry. If the signatures match, 
then the module is accepted, but if they do not match, then the module is rejected. 
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All of the modules of the application can thus be downloaded in the manner specified 
above, and the application can be run by the receiver/decoder 2020. 

The downloading of data into the receiver/decoder 2020 will now be described in more 
5 detail with reference to Figures 9 to 13. 

The receiver/decoder 2020 includes loader 100, referred to as a "Bootstrap" loader 100, 
which is used primarily to download a loader for downloading software, such as 
manufacturer firmware, the run time engine 4008 and applications, present in the MPEG 
10 datastream for storage in the FLASH memory 69 of the receiver/decoder 2020. The 
Bootstrap loader 100 is stored in the FLASH memory 69 of the receiver/decoder 2020 
and typically is not erasable therefi-om. The Bootstrap loader 100 functions under the 
control of the hardware of the receiver/decoder 2020 and software stored therein. 

15 Writing/updating of software stored in the receiver/decoder may be performed: 
at the request of the user of the receiver/decoder 2020; 
at the request of an application stored in the receiver/decoder 2020; or 
if the software previously stored in the receiver/decoder 2020 (referred to as 
"resident" software) has become corrupted. 

20 

To determine whether resident software has become corrupted, software written by the 
manufacturer of the receiver/decoder 2020 and stored therein calculates a checksum on 
the resident software data and compares this to a checksum written in the resident 
software. If the two values of the checksum are not equal, the resident software has 
25 become corrupted. 

The FLASH memory 69 and EEPROM 68 of the receiver/decoder 2020 contain 
parameters which enable the Bootstrap loader 100 to download a loader in the form of 
native code from the bitstream. Parameters may be stored in the Bootstrap loader 100 
30 itself, that is, in FLASH memory 69, or in EEPROM 68. Examples of parameters 
which may be stored in the FLASH memory 69 include: 

the frequency to which the transponder 2014 is tuned; 
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various characteristics of the signal to be demodulated by the receiver/decoder 
2020; 



the PID upon which software is to be transmitted; 



5 



a set of public keys (preferably three keys) to be used during authentication; 
a time-out for the loading of directory tables from the MPEG bitstream; 



the version number of the Bootstrap loader 100; and 



an N byte "checksum" parameter used to check the integrity of resident software, 
the value of which is determined by the manufacturer of the receiver/decoder 



2020. 



10 



Examples of parameters stored in the EEPROM 68, and which may be updated by an 
application stored in the receiver/decoder 2020, include: 

further characteristics of the signal to be demodulated by the receiver/decoder 

2020; and 



These parameters are stored in respective parameter fields in the FLASH memory 69 
or EEPROM 68. With reference to Figure 10, each parameter field 400 includes a 
length 402, a reserved byte 404, a set of parameters 406 and a Longitudinal Redundancy 

20 Code (LRC) checksum 408. The checksum comprises CRL 410, which is an exclusive- 
OR of the preceding bytes of the parameter field 400, and NCRL 412, which is the Vs 
complement of the CRL 410. If an application stored in the receiver/decoder 2020 
wishes to update the parameters stored in a parameter field, for example, to update a 
PID, it calculates an LRC checksimi for the field and compares that with the LRC 

25 checksum 410 stored in the field. If the two values match, then updating of the 
parameter field is enabled; if not, the updating of the parameter field is aborted. 

The MPEG bitstream including the data to be downloaded into the receiver/decoder 
2020 carries native code, at least part of which includes an additional loader, referred 
30 to as an "Instream" loader. The Bootstrap loader 100 downloads the Instream loader 
from the MPEG bitstream into RAM 72 of the receiver/decoder 2020, and it is this 
Instream loader which downloads the data from the MPEG bitstream, for example, in 



15 



parameters which enable a report on a writing/updating to be compiled. 
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The software downloaded into the FLASH memory 69 of the receiver/decoder 2020 
may also contain a loader, referred to as a "Resident" loader. This loader should at least 
5 be able to perform a writing/update of software from the MPEG bitstream, and may 
offer other features, such as updates from local ports, and may allow the video and 
audio data in the MPEG bitstream to be decoded. The Resident loader is loaded from 
the bitstream at the request of an application, for example, to complement the loader 
which performs the downloading of the Instream loader, or for loading data from the 
10 bitstream. For example, if writing/updating is requested by an application stored in the 
receiver/decoder 2020 and the resident software is not corrupted, the Resident loader is 
used to perform the update instead of an Instream loader. This can reduce the time 
taken to update software in the receiver/decoder. At least part of the Resident loader 
is in the form of native code. 

15 

The various MPEG tables included in the MPEG bitstream which allow a 
receiver/decoder 2020 to locate and download the required software will now be 
described with reference to Figures 11 and 12. 

20 The MPEG bitstream includes at least one hardware directory table 200 and a plurality 
of loader directories 300. 

A hardware directory table 200 enables the Bootstrap loader 100 to locate the correct 
versions of the Instream loader and the software to be downloaded for a number of 
25 different versions of the receiver/decoder 2020. With reference to Figure 11, a 
hardware directory table 200 includes a TID 202 of DO and a TID extension 204 of 
0000, which values are previously stored in the EEPROM 68 of the receiver/decoder 
2020 to enable, for example, the Bootstrap loader 100 to locate and download the 
hardware directory table 200. 

30 

The hardware directory table 200 includes: 

a version number, HVERSION 206, of the hardware directory 200. The version 
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number is increased each time there is a change in the content of the hardware directory 
200; 

the number, NL 208, of Instream loader descriptions contained in the hardware 
directory 200; 

5 for each version of the receiver/decoder 2020: 

an identifier, HVN 210, of a version number of such a receiver/decoder 

2020; 

the TID 212 of the MPEG tables used for the loader directory 300 
associated with that HVN 210, the Instream loader and the software to be downloaded; 
10 a redundant byte, RES 214; 

a maximum size, SECTION_LEN 216, of a section of the MPEG table 
used for the loader directory 300 associated with that HVN 210; 

a value, TIME_OUT 218, of the time-out for the loading of the loader 
directory 300 associated with the HVN 210; and 
15 the value, SGN_SIGN 220, of the signature of the loader directory 

associate with the HVN 210; 

an identification, KEY 222, of the private key used for the authentication of the 

hardware directory 200; and 

a ciphered area, CIPH_AREA 224, containing the signature SIGN_H 226 of the 
20 hardware directory 200, the signature being offset from the beginning of the 
CIPH_AREA 224 by a signature offset SGN_OFFSET 228. 

The HVN 210 of the receiver/decoder is 4 bytes in length. One byte is reserved for 
future use, two bytes include a code for the version number of the hardware in the 
25 receiver/decoder, and one byte includes a code for the manufacturer of the 
receiver/decoder. This enables the Bootstrap loader to download the version of the 
Instream loader which is compatible with the hardware platform of the receiver/decoder. 

Having downloaded the hardware directory table 200, the Bootstrap loader 100 searches 
30 the table 200 for an entry corresponding with the HVN 210 of the receiver/decoder 
2020. If a match does not occur, the downloading is aborted. If a match occurs, the 
Bootstrap loader 100 identifies fi-om the table 200 the TID 212 that has been assigned 
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to the loader directory 300 associated with the HVN 210 of the receiver/decoder 2020, 
the Instream loader and the software to be downloaded. 

With reference to Figure 12, each loader directory 300 associated with the HVN 210 
5 of the receiver/decoder 2020 includes: 

a version number, LVERSION 302, of the loader directory 300. The version 
niimber is increased each time there is a change in the content of the loader directory 
300; 

the number, NL 304, of MPEG tables of the Instream loader; 
10 the version number, LVERS 306, of the Instream loader; 

the number, NS 308, of MPEG tables of the software to be downloaded; 
the version number, SVERS 310, of the software to be downloaded; 
for each MPEG table of the Instream loader: 

the identification, SEG_ID 312 of that MPEG table; 
15 the TID extension, TID_EXT 3 14, of that MPEG table; 

two redimdant bytes, RES 316; 

a maximum size, SECTION_LEN 318, of an MPEG section of that 

MPEG table; 

a value, TIME_OUT 320, of the time-out for the loading of that MPEG 

20 table; and 

the value, SGN_SIGN 322, of the signature of that MPEG table; 
for each MPEG table of the software: 

the identification, SEG_ID 324 of that MPEG table; 
the TID extension, TID_EXT 326, of that MPEG table; 
25 two redundant bytes, RES 328; 

a maximum size, SECTION_LEN 330, of an MPEG section of that 

MPEG table; 

a value, TIME_OUT 332, of the time-out for the loading of that MPEG 

table; and 

30 the value, SIGN_SIGN 334, of the signature of that MPEG table; 

an identification, KEY 336, of the private key used for the authentication of the 
loader directory 300; and 
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a ciphered area, CIPH_AREA 338, containing the signature SIGN_L 340 of the 
loader directory 300, the signature being offset from the beginning of the CIPH_AREA 
338 by a signature offset SGN_OFFSET 342. 

5 During the updating a report is compiled, containing, inter alia, details on each step of 
the writing/updating process, for example, whether the step was successfully completed 
or not, so that the step at which writing/updating may have failed may be later 
identified. For example, the report includes: 

the HVERSION 206 of the hardware directory 200; 
10 if an error has occurred during the processing of the hardware directory 200, an 

indication of the type of error and the TED extension of the MPEG table of the 
hardware directory 200 at which the error occurred; 
the LVERSION 302 of the loader directory; 

if an error has occurred during the processing of the loader directory 300, an 
15 indication of the type of error and the TID extension of the MPEG table of the loader 
directory 300 at which the error occurred; and 

if an error has occurred during the processing of the Instream loader, an 
indication of the type of error and the TO) extension of the MPEG table of the Instream 
loader at which the error occurred; and 
20 if an error has occurred during the processing of the software, an indication of 

the type of error and the TID extension of the MPEG table of the software at which the 
error occurl"ed. 

The report also includes the reason as to why writing/updating was performed, for 
25 example, at the request of an application, the number of software inconsistencies 
detected and the nimiber of upgrade failures. 

When updating resident software with software present in the MPEG bitstream at the 
request of an application, the receiver/decoder 2020 is arranged to compare the SVERS 
30 3 1 0 of the software identified in the freshly downloaded loader directory table 300 with 
the version number of the resident software. If the SVERS 310 is later, then the 
modules associated with the resident software are erased from the FLASH memory 69 
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and the modules of the updated software are downloaded and mounted. 



A front panel LED display 4038 of the receiver/decoder 2020 is adapted to display 
messages to the user of the receiver/decoder 2020 during the downloading of data. For 
5 example, the four following messages are specified in a parameter field stored in the 
FLASH memory 69 of the receiver/decoder 2020: 

a "LOAD" message, indicating that writing/updating is proceeding in a "normal" 

state, that is, at the request of an application; 

a "NATIV" message, indicating that updating is proceeding in a "native" state, 
10 that is, because the resident software has become corrupted; 

a "OOO" message, indicating that the Bootstrap loader 100 is imable to perform 
the writing/updating because it is unable to locate consistent or valid parameters 
(such as the frequency to which the MPEG tuner 4028 is to be set or the PID 
of the MPEG bitstream) in the memory of the receiver/decoder 2020; and 
15 • an "ERRL" message, indicating that an error, other than those specified with 
reference to the OOO message, has occurred during writing/updatmg. 

As an alternative to static messages, messages in the form of an animated cartoon may 
be displayed on the receiver/decoder. 

20 

The steps in, for example, the updating of resident software will now be described with 
reference to Figure 13. 

In step SI 01, software stored in the receiver/decoder checks the integrity of any resident 
25 software by performing the checksum calculation and comparing the result of that 
calculation with the value of the checksmn stored in the resident software. If the two 
values are different, then updating continues ra the native state; if the two values are the 
same, or if no resident software is located, then updating continues in the normal state. 

30 In this native state, it is then determined whether a previous update request is still 
pending in step SI 02, If such an update request from an application is pending, that 
request is erased in step SI 03 and step SI 02 is repeated. If no such update request is 
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still pending, the report of the previous updating is erased in step SI 04 and initialised 
in order to commence the logging of this updating. The report logs the reason for the 
updating request, that is, to replace corrupted software. 

5 Following step SI 04, the NATIV message is displayed on the display 4038 of the 
receiver/decoder 2020 in step S105. 

In step SI 06, the parameters stored in the parameter fields of the EEPROM and FLASH 
memory 69 are checked. If the tuning parameters and/or the PED parameter are not 
10 defined, the display 4038 is caused to display the OOO message and the updating is 
aborted. 

If these parameters are defined in the parameter field, the updating proceeds to step 
S107, in which the Bootstrap loader 100 tunes the MPEG tuner 4028 to the transponder 
15 2014 in accordance with the parameters stored in the parameter fields. If the tuning 
fails, the updating is aborted and the ERRL message is displayed. 

If the timing is successful, the Bootstrap loader 100 downloads and authenticates the 
hardware directory 200 in step SI 08. If the hardware directory 200 is not downloaded 
20 before the time-out is reached, or if the hardware directory 200 is not authenticated (as 
an error has occurred during the downloading), the updating is aborted and the ERRL 
message displayed. 

If downloading and authentication are successful, the Bootstrap loader 100 searches for 
25 an HVN 210 corresponding to the version number of the receiver/decoder 2020, as 
defined in a parameters field. If such an HVN is not located, the updating is aborted 
and the ERRL message displayed. 

If such an entry is located, the Bootstrap loader 100 reads the TID 212 of the MPEG 
30 tables used for the loader directory 300 associated with that HVN 210, the Instream 
loader and the software to be downloaded and, in step S109, downloads and 
authenticates the correct loader directory 300. If the loader directory 300 is not 
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downloaded before the time-out is reached, or if the loader directory is not authenticated 
(as an error has occurred during the downloading), the updating is aborted and the 
ERRL message displayed. 

5 If downloading and authentication are successful, the Bootstrap loader 100 downloads 
the Instream loader from the MPEG bitstream into the RAM 72 of the receiver/decoder 
2020 in step SllO. If the Instream loader is not downloaded before the time-out is 
reached, or if the Instream loader is not authenticated (as an error has occurred during 
the downloading), the updating is aborted and the ERRL message displayed. 

10 

If the Instream loader is successfully loaded and authenticated, the Instream loader is 
executed in step Sill and, in step SI 12, the corrupted portion of the resident software 
is erased and the segments of the software to be downloaded are downloaded by the 
Instream loader, authenticated and written in the appropriate address location in FLASH 
15 memory 69. If the software is not downloaded before the time-out is reached, or if the 
software is not authenticated (as an error has occurred during the downloading) or if an 
error occurs during the writing of the software into the FLASH memory 69, the 
updating is aborted and the ERRL message displayed. 

20 If the resident software is successfully updated, the writing of the report is stopped in 
step SI 13 and the receiver/decoder 2020 reset to enable a ftirther updating to be 
conunenced. 

In any steps at which the updating is aborted, the step may alternatively be reperformed 
25 a prescribed niunber of times until successfiilly completed or until a time-out for 
performing that step is reached. 

If updating is to proceed in the normal state, the Bootstrap loader 100 determines in step 
S201 whether an update request from an application is already pending. If not, the 
30 updating continues as normal. If there is already a pending update request, then the 
pending request is processed first. 
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The report of the previous updating is erased in step S202 and initialised in order to 
commence the logging of this updating. The report logs the reason for the updating 
request, for example, at the request of an application, and any updating options that are 
selected by the application. 

5 

It is then determined, in step S203, whether a Resident loader is stored in the FLASH 
memory 69 of the receiver/decoder 2020. If such a loader is stored in the 
receiver/decoder, it is determined in step S204 whether the Resident loader has been 
executed in response to a command from software stored in the receiver/decoder 2020. 
10 If the Resident loader has been executed, then the Resident loader performs subsequent 
steps in the updating process that would normally be carried out by the Bootstrap loader 
100. 

If the Resident loader is not present, or has not been executed, then the Bootstrap loader 
15 100 is used. It is also possible for the software stored in the receiver/decoder 2020 to 
force the Bootstrap loader 100 to continue the updating process even if a Resident 
loader is stored in the FLASH memory 69. 

The LOAD message is displayed on the display 4038 of the receiver/decoder 2020 in 
20 step S205. 

In step S206, the parameters stored in the parameter fields of the EEPROM and FLASH 
memory 69 are checked. If the tuning parameters and/or the PID parameter are not 
defined, the display 4038 is caused to display the OOO message and the updating is 
25 aborted. 

If these parameters are defmed in the parameter field, the updating proceeds to step 
S207, in which the Bootstrap or Resident loader tunes the tuner 4028 to the transponder 
2014 in accordance with the parameters stored in the parameter fields. If the tuning 
30 fails, the updating is aborted and the ERRL message is displayed. 



If the tuning is successfiil, the Bootstrap or Resident loader downloads and authenticates 
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the hardware directory 200 in step S208. If the hardware directory 200 is not 
downloaded before the time-out is reached, if the hardware directory is not authenticated 
(as an error has occurred during the downloading) or, depending on an option selected 
by the application requesting the updating, if a successful updating has been carried out 
5 using a hardware directory having the same HVERSION 206, the updating is aborted 
and the ERRL message displayed. 

If downloading and authentication are successful and the updating is enabled by the 
application, the Bootstrap or Resident loader searches for an HVN 210 corresponding 
10 to the version number of the receiver/decoder 2020, as defined in a parameters field. 
If such an HVN is not located, the updating is aborted and the ERRL message 
displayed. 

If such an entry is located, the Bootstrap or Resident loader reads the TID 212 of the 
15 MPEG tables used for the loader directory 300 associated with that HVN 210, the 
Instream loader and the software to be downloaded and, in step S209, downloads and 
authenticates the correct loader directory 300. 

If the loader directory 300 is not dovraloaded before the time-out is reached, if the 
20 loader directory is not authenticated (as an error has occurred during the downloading), 
or, depending on an option selected by the application requesting the updating, if a 
successful updating has been carried out using a loader directory having the same 
LVERS 306, the updatmg is aborted and the ERRL message displayed. 

25 If downloading and authentication are successful and the updating is enabled by the 
application, the Bootstrap loader 100 downloads the Instream loader from the MPEG 
bitstream into the RAM 72 of the receiver/decoder 2020 in step S210. If the Instream 
loader is not downloaded before the time-out is reached, or if the Instream loader is not 
authenticated (as an error has occurred dxuring the downloading), the updating is aborted 

30 and the ERRL message displayed. 

If the Instream loader is successfully loaded and authenticated, the Instream loader is 
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executed in step S211 and, in step S212, the version number SVERS 310 of the 
software in the MPEG bitstream is compared to that of the resident software. 



If the version numbers are the same, the writing of the software into the FLASH 
5 memory 69 is not performed and the apphcation update request is erased. If the version 
numbers are different, the resident software is erased and the segments of the software 
to be downloaded are downloaded by the Instream loader, authenticated and written in 
the FLASH memory 69 in step S213, 

10 If the software is not downloaded before the time-out is reached, or if the software is 
not authenticated (as an error has occurred during the downloading) or if an error occurs 
during the writing of the software into the FLASH memory 69, the updating is aborted 
and the ERRL message displayed. 

15 If the resident software is successfiiUy updated, the writing of the report is stopped in 
step 82 14, the pending update request is erased and the receiver/decoder 2020 reset to 
enable a fiirther updating to be commenced. 

As in the native state, in any steps at which the updating is aborted, the step may 
20 alternatively be reperformed until successfiilly completed. 

It will be imderstood that the present invention has been described above purely by way 
of example, and modifications of detail can be made within the scope of the invention. 

25 Each feature disclosed in the description, and (where appropriate) the claims and 
drawings may be provided independently or in any appropriate combination. In the 
aforementioned preferred embodiments, certain features of the present invention have 
been implemented using computer software. However, it will of course be clear to the 
skilled man that any of these features may be implemented using hardware, 

30 Furthermore, it will be readily imderstood that the fimctions performed by the hardware, 
the computer software, and such like are performed on or using electrical and like 
signals. 
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CLAIMS 

1. A method of downloading data to a receiver/decoder, comprising the steps, at 
5 the receiver/decoder, of: 

receiving a bitstream including the data; 

downloading a loader for loading the data from the bitstream into the 
receiver/decoder; and 

downloading said data from the bitstream using said downloaded data loader. 

10 

2. A method according to Claim 1, wherein the downloaded data loader is deleted 
from the receiver/decoder after the data has been downloaded from the bitstream. 

3. A method according to Claim 1, wherein the downloaded data loader is 
15 subsequently stored in non-volatile memory of the receiver/decoder. 

4. A method according to Claim 3, wherein the non-volatile memory is a Flash 
memory volume of the receiver/decoder. 

20 5. A method according to any preceding claim, wherein the downloading of the 
data is performed by the downloaded data loader. 

6. A method according to any preceding claim, wherein a portion only of data 
stored in the receiver/decoder is replaced by a corresponding portion . of data 

25 downloaded by the downloaded data loader. 

7. A method according to any preceding claim, wherein the bitstream includes at 
least one data loader, said method further comprising the steps, at a transmitting system, 
of: 

30 for the or each data loader, dividing the data loader into a plurality of modules; 

and 

for the or each data loader, dividing the data into a respective plurality of 
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modules, each plurality of data modules being associated with a respective plurality of 
data loader modules. 



8. A method according to Claim 7, further comprising the steps, at the transmitting 
5 system, of: 

for the or each data loader, formatting each of the modules as a respective table, 
the tables having the same respective table identification ("TID") and respective 
different table identification extensions ("TID-extensions"); and 

for the or each plurality of modules of data, formatting each of the modules of 
10 data as a respective table, the tables having the same respective TID as the tables of the 
data loader modules associated therewith and respective different TID-extensions. 

9. A method according to Claim 8, comprising, in said downloading steps, of 
downloading module tables having the same TID. 

15 

10. A method according to Claim 9, wherein said tables have respective different 
TID- extensions other than a predetermined TID- extension; and further comprising the 
step, at the transmitting system, of generating a respective directory table for the or each 
pluraUty of modules having the same TID, the or each directory table having said 

20 predetermined TED-extension and that TID, the directory table containing for each of 
the modules a name of that module and the respective TID-extension. 

IL A method according to Claim 10, further comprising the steps, at the 
receiver/decoder, of: 

25 downloading one of the tables having the predetermined TID-extension so as to 

dovmload a directory table; 

determining from the content of the directory table the TID-extensions of the 
module tables having the same TID as the directory table; and 

in said downloading steps, downloading the module tables having the same TID 
30 as that of the downloaded directory table and TID-extensions determined from the 
downloaded directory table. 
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12. A method according to any preceding claim, further comprising the step, at a 
transmitting system, of generating a directory table having a predetermined table 
identification ("TID") and containing, for each of a plm-ality of version identifications 
of a receiver/decoder, a respective TID associated with that version identification, 

13. A method according to Claim 12, wherein the version identification comprises 
a code for the version of the receiver/decoder and a code for the manufacturer of the 
receiver/decoder. 



10 14. A method as claimed in Claim 12 or 13 when dependent upon Claim 11, further 
comprising the steps, at the receiver/decoder, of: 

downloading said directory table having the predetermined TID; and 
determining the version identification of the receiver/decoder; 
wherein the step of downloading a directory table comprises downloading that 
15 one. of the tables having a TID associated with the version number of the 
receiver/decoder and the predetermined TID-extension. 

15. A method according to any of Claims 10 to 14, further comprising the steps, at 
the transmitting system, of: 

20 including in each transmitted directory table a directory version identification 

therefor; and 

at the receiver/decoder:- 

^ determining whether the directory version identification of a currently 

transmitted directory table is more recent than the directory version identification of a 
25 previously downloaded directory table having the same TID as said currently transmitted 

directory table, and if not, aborting the downloading of data. 

16. A method according to any preceding claim, fiirther comprising the step, in a 
transmitting system, of: 

30 including in the bitstream a data version identification of the data; and, 

at the receiver/decoder; 

determining whether the data version identification of the received data is more 
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recent than the data version identification of currently stored data, and if so, performing 
said step of downloading said data from the bitstream. 



17. A method according to any preceding claim, wherein at least part of the 
5 downloaded data loader is in the form of code which is specific to the hardware of the 

receiver/decoder. 

18. A method according to any preceding claim, further comprising the steps, at a 
transmitting system, of; 

10 transmitting a second data loader included in said bitstream; and 

at the receiver/decoder, of: 

downloading the second data loader; and 

downloading one of the first-mentioned data loader and the data, said second 
data loader performing the downloading of one of the first-mentioned data loader and 
15 the data, 

19. A method according to Claim 18, wherein at least part of the second data loader 
is in the form of code which is specific to the hardware of the receiver/decoder. 

20 20. A receiver/decoder comprising: 

a receiver for receiving a bitstream including data; 
storage means; and 

downloading means for downloading from the bitstream into the storage means 
a loader for loading the data from the bitstream into the receiver/decoder, 

25 

21 , A receiver/decoder according to Claim 20, fiirther comprising means for deleting 
the downloaded data loader from the storage means after the data has been downloaded 
from the bitstream. 

30 22. A receiver/decoder according to Claun 20, fiirther comprising a non-volatile 
memory for storing the downloaded data loader after the data has been downloaded 
from the bitstream. 
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23. A receiver/decoder according to Claim 22, wherein the non- volatile memory is 
a Flash memory volume of the receiver/decoder. 

24. A receiver/decoder according to any of Claims 20 to 23, wherein the downloaded 
5 data loader is adapted to perform the downloading of data from the bitstream, 

25. A receiver/decoder according to any of Claims 20 to 24, wherein the downloaded 
data loader is adapted to replace a portion only of data stored in the receiver/decoder 
by a corresponding portion of data downloaded thereby. 

10 

26. A receiver/decoder according to Claims 20 to 25, arranged to download tables. 

27. A receiver/decoder according to Claim 26, wherein said downloading means is 
arranged to download a table having a table identification ("TID") and a predetermined 

15 table identification extension ("TBD-extension") so as to download a directory table, to 
deteimine from the content of the directory table the TID-extensions of module tables 
having the same TID as the directory table, and to download the module tables having 
the same TID as that of the downloaded directory table and TED-extensions determined 
from the downloaded directory table so as to download said loader. 

20 

28. A receiver/decoder according to Claim 26 or 27, wherein said dovmloading 
means is arranged to download a directory table having a predetermined TID and 
containing, for each of a plurality of version identifications of a receiver/decoder, a 
respective TED associated with that version identification, to detennine the version 

25 identification of the receiver/decoder, and to download a directory table having a TID 
associated with the version number of the receiver/decoder and the predetermined TID- 
extension, 

29. A receiver/decoder according to Claim 27 or 28, wherein said downloading 
30 means is arranged to determine whether a directory version identification of a currently 

transmitted durectory table is more recent than the directory version identification of a 
previously downloaded directory table having the same TID as the currently transmitted 
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directory table, and if not, to abort the downloading of said loader. 



30. A receiver/decoder according to any of Claims 20 to 29, wherein the data loader 
is in the form of code which is specific to the hardware of the receiver/decoder. 

5 

3L A receiver/decoder according to any of Claims 20 to 30, wherein said 
downloading means is arranged to download a second loader included in data included 
in said bitstream for downloading one of the first-mentioned loader and the data. 

10 32. A transmission system comprising: 

means for transmitting a bitstream including at least one loader for loading data 
into a receiver/decoder, and data associated with the or each loader; and 

means for dividing the or each loader into a plurality of modules and dividing 
the data associated with the or each loader into a respective plurality of modules for 
15 transmittal by said transmitting means. 

33. A transmission system according to Claim 32, further comprising: 

means for formatting each of the modules of the or each loader as a respective 
table, the tables of the or each loader having the same respective table identification 
20 ("TID") and respective different table identification extensions ("TID-extensions"); and 

means for formatting each of the modules of the data associated with the or each 
loader as a respective table, the tables of the modules of data having the same respective 
TID as the tables of the loader modules associated therewith and respective different 
TID-extensions. 

25 

34. A transmission system according to Claim 33, wherein said tables have 
respective different TID-extensions other than a predetermined TID-extension; said 
system further comprising means for generating a respective directory tables for the or 
each plurality of modules having the same TED, each directory table havmg that TID 

30 and said predetermined TID-extension, the directory containing for each of the modules 
a name of that module and the respective TID-extension. 
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35. A transmission system according to any of Claims 32 to 34, further comprising: 
means for generating a directory table having a predetermined table identification 

("TID") and containing, for each of a plurality of version identifications of a 
receiver/decoder, a respective TID associated with that version identification, 

5 

36. A transmission system according to any of Claims 32 to 35, further comprising 
means for including in each transmitted table a version identification therefor. 

37. A transmission system according to any of Claims 32 to 36, wherein the or each 
10 loader is in the form of code which is specific to the hardware of the receiver/decoder. 

38. A combination of a receiver/decoder according to any of Claims 20 to 31 and 
a transmission system according to any of Claims 32 to 37, 

15 39. A signal including at least one loader for loading data into a receiver/decoder, 
and data associated with the or each loader, the or each loader being divided into a 
plurality of modules and the data associated with the or each loader being divided into 
a respective plurality of modules. 

20 40, A method of downloading data to a receiver/decoder substantially as herein 
described. 

41. A receiver/decoder substantially as herein described. 



25 



42. A transmission system substantially as herein described. 
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French Language Declaration _ 

^ 22511 

mBHT TRmm moE 

As a below named inventor, I hereby declare that: 




En tant que I'inventeur nomme ci-apres, je declare par le present 
acte que: 



Mon domicile, mon adresse postale et ma national] te sont ceux 
figurant ci-dessous a cote de mon nom. 



Je crois etre le premier inventeur original et unique (si un seul 
_nom est mentionne ci-dessous), ou Tun des premiers co- 
;finventeurs originaux (si plusieurs noms sont menUonnes ci- 
ijdessous) de I'objet revendique, pour lequel une demande de 
'Ibrevet a ete deposee concernant rmvention mtitulee 



My residence, post office address and citizenship are as stated 
next to my name. 



I believe I am the original, first and sole inventor (if only one 
name is listed below) or an original, first and joint inventor (if 
plural names are listed below) of the subject matter which is 
claimed and for which a patent is sought on the invention entitled 



INSTREAM LOADER 



] et dont la description est fournie ci-joint a moins que la case 
] suivante n'ait ete cochee: 

□ a ete deposee ie 

sous le numero de demande des Etats-Unis ou le 
numero de demande international PCT 

et modifiee le 

(le cas echeant). 



the specification of which is attached hereto unless the following 
box is checked: 

□ was filed on 

as United States Application Number or PCT 
International Application Number 

and was amended on 

(if applicable). 



Je declare par le present acte avoir passe en revue et compris le 
contenu de la description ci-dessus, revendications comprises, 
telles que modifiees par toute modification dont il aura ete fait 
reference ci-dessus. 



Je reconnais devoir divulguer toute information pertinente a la 
brevetabilite, comme defini dans le Titre 37, § 1,56 du Code 
federal des reglementations. 



I hereby state that I have reviewed and understand the contents 
of the above identified specification, including the claims, as 
amended by any amendment referred to above. 

I acknowledge the duty to disclose information which is material 
to patentability as defined in Title 37, Code of Federal 
Regulations, § 1.56. 
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French Language Declaration 

Jc revcndique par Ic prdscnt acte avoir la prioritd 6trang6rc, en 
vcrtu du Tilre 35. § 1 19(a)-(d) ou § 365(b) du Code des Elals- 
Vnis, sur toute dcmandc ctrangcre dc brevet ou cerlifical 
d'inventcur ou, en verlu du Tilre 35, § 365(a) du meme Code, sur 
toute demande Internationale PCX designant au moins un pays 
autre que les Etats-Unis et figurant ci-dessous et, en cochant la 
case, j'ai aussi indique ci-dessous toute demande etrangere de 
brevet, tout certificat d'lnventeur ou toute demande internalionale 
PCT ayant une date de depot prccedant celle dc la demande a 
propos de laquetle une priorite est revendiquec. 

Prior foreign application(s) 
Demande(s) de brevet anterieure(s) 

9740?.:^^^, 0 Europe 

(Number) (Country) 
(Numero) (Pays) 



(Number) (Country) 
(Numero) (Pays) 

Je revendique par le present acte tout benefice, en vertu du Titre 
35, § 1 19(e) du Code des Etats-Unis, de toute demande de brevet 
iprovisoirc effectuee aux Etats-Unis et figurant ci-dessous. 

^Ikpplication No.) (Filing Date) 

|||r de demande) (Date de depot) 



J?Lpplication No.) (Filing Date) 

de demande) (Date de depot) 

fip revendique par le present acte tout benefice, en vertu du Titre 
!"35, § 120 du Code des Etats-Unis, de toute demande de brevet 
^yffcctu6e aux Etats-Unis, ou en vertu du Titre 35, § 365(c) du 
^ meme Code, de toute demande Internationale PCT designant les 
f jEtats-Unis et figurant ci-dessous et, dans la mesure ou Tobjet de 
Tilhacune des revendications de cette demande de brevet n'est pas 
^"'i^ivulgue dans la demande anterieure americaine ou Internationale 
MPCT, en vertu des dispositions du premier paragraphe du Titre 
hS5, § 1 12 du Code des Etats-Unis, je reconnais devoir divulguer 
j^^^oute information pertinente a la brevetabilite, comme defini dans 
^:Je Titre 37, § L56 du Code federal des r^glementations, dont j'ai 
t4>u disposer entre la date de d€p6t de la demande anterieure et ia 

datede depot de la demande nationale ou Internationale PCT de 

la pr^sente demande: 

PCT/TB9a/01f^n 5 October 1998 
(Application No.) (Filing Date) 

(N** de demande) (Date de depot) 



(Application No.) (Filing Date) 

(N^ de demande) (Date de depot) 

Je declare par le present acte que toute declaration ci-incluse est, 
k ma connaissance, veridique et que toute declaration formulee 
h. partir de renseignements ou de suppositions est tenue pour 
vdridique; ei de plus, que toutes ces declarations ont 6x6 
formulees en sachant que toute fausse declaration volontaire ou 
son Equivalent est passible d'une amende ou d'une incarc6ration, 
ou des deux, en vertu de la Section 1001 du Titre 1 8 du Code des 
Etats-Unis, et que de telles d<Sclarations volontairement fausses 
risquenl de compromettre la validity de la demande de brevet ou 
du brevet d61ivr6 k partir de celle-ci. 



I lisrcby claim foreign priority under Title 35, United States 
Code, § 1 19(a)-(d) or § 365 (b) of any foreign application(s) for 
patent or inventor's certificate, or § 365(a) of any PCT 
international application which designated at least one country 
other than the United Slates, listed below, and have also 
identified below, by checking the box, any foreign application for 
patent or inventor's certificate, or PCT International application 
having a filmg date before that of the application on which 
priority is claimed. 



Priority Claimed 
Droit de priori te revendique 

3 October 1997 m 
(Day/MonthA'ear Filed) 
(Jour/Mois/Annee de depot) 

U 

(Day/MonthA'ear Filed) 
(Jour/Mois/Annee de depot) 

I hereby claim the benefit under Title 35, United States Code, § 
I i 9(e) of any United States provisional application(s) listed 
below. 



I hereby claim the benefit under Title 35, United States Code, § 
120 of any United States application(s), or § 365(c) of any PCT 
International application designating the United States, listed 
below and, insofar as the subject matter of each of the claims of 
this application is not disclosed in the prior United States or PCT 
International application in the manner provided by the first 
paragraph of Title 35, United States Code, § 1 12. 1 acknowledge 
the duty to disclose information which is material to patentability 
as defined in Title 37, Code of Federal Regulations, § L56 which 
became available between the filing date of the prior application 
and the national or PCT International filing date of this 
application. 



Penciing ^ 

(Status) (patented, pending, abandoned) 
(Statut) (brevet6, en cours d'examen, abandonn6) 



(Status) (patented, pending, abandoned) 
(Statut) (brevete, en cours d'examen, abandon ne) 

I hereby declare that all statements made herein of my own 
knowledge are true and that all statements made on information 
and belief are believed to be true; and further that these 
statements were made with the knowledge that willful false 
statements and the like so made are punishable by fine or 
imprisonment, or both, under Section lOOl of Title 18 of the 
United States Code and that such willful false statements may 
jeopardize the validity of the application or any patent issued 
thereon. 
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French Language Declaration 

POUVOIRS; En tant que Tinventeur cite, je designe par la 
presence r(Ies) avocat(s) et/ou agent(s) suivant(s) pour qu'ils 
poursuive(nt) la procedure dc cette demande de brevet et 
traite(nt) toute affaire s'y rapportant avec TOffice des brevets et 
des marques: {mentionner le nom et le numero 
d'enregistrement). 



POWER OF ATTORNEY: As a named inventor, I hereby 
appoint the following attomey(s) and/or agent(s) to prosecute this 
application and transact all business in the Patent and Trademark 
Office connected therewith: (list name and registration number) 

Jonathan P Osha, Reg No 33.986. Alan D Rosenthal. Reg No 27.833. Richard A Fagin. 
Reg No 39.182. Adenike Adewuya, Reg No 42.254. David E Mixon. Reg No 43,809, 
Thomas K Scherer. Reg. No. 45,079. K KaRan Reed. Reg No 45,036. Jeffrey S Bergman. 
Reg No P45,925. Scott W Hejny, Reg No P45.882. W Thomas Mon-ow, Reg No P45,953, 
Y Renee Alsandor, Reg No P45.883 



Adresser toute correspondance a: 


Send Correspondence to: Jonathan P. Osha 




ROSENTHAL & OSHA L.L.P. 




700 Louisiana, Suite 4550 




Houston, Texas 77002 


Adresser tout appel telephonique a; 


Direct Telephone Calls to: 


(nom et numero de telephone) 


(name and telephone number) 




Jonathan P. Osha (713) 228-8600 





Nom complet de I'unique ou premier inventeur 


Full name of sole or first inventor 
Jean-Claude SARPAT^^g^ 


Signature de I'inventeur Date 


Inventor's signaturet^^^;;^^^^^^ Dat^"^ [o^joC^ 


Domicile 


Residence ^"^^ place d'0be2rursel 

F-93800 Epinay sur Seine, PRANCE 


Nationalite 


Citizenship 


Adresse postale 


Post Office Address 2-4, place d'Oberursel 

F-93800 Epinay sur Seine, FEIANCE 






Nom complet du second co-inventeur, le cas echeant 


Full nanne of second joint inventor, if any 


Signature du second inventeur Date 


Second Inventor's signature Date 


Domicile 


Residence 


Nationalite 


Citizenship 


Adresse postale 


Post Office Address 







(Fournir les memes renseignemenis et la signature de tout co- (Supply similar information and signature for third and 

inventeur supplementaire.) subsequent joint inventors.) 
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